Home/ Questions/Q 9130287
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-17T07:56:17+00:00

I have clients with multiple websites on the same physical dedicated server. Often, brute

  • 0

I have clients with multiple websites on the same physical dedicated server. Often, brute force attacks will try accessing invalid urls on one website and then continue on others.

Is there a way to capture invalid url requests on one website and update a shared block list for all the sites on the same server?

I read this: How do I use a PHP/MySQL-based script to ban IP blocks from a website? and was looking for a way to update some kind of file I could auto-include on each site to reduce the hit of the malicious activities, perhaps cleaning that file on a cron.

Any thoughts or best practices for this kind of situation?

Thanks!

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    While I have serious reservations about it, our server admin installed PSAD, which ‘seems’ to work – lots of alerts about the Chinese (China based IP addresses, with a proxy that could of course be any one anywhere) at the moment. Just be clear that you know what you are blocking and why.

    TIP: set alert level to 4+ for email alerts (or just turn email alerts off) or you get thousands a day.

    • 0